Cryptographic Data Splitting? What’s that?

Stateless Computing

By G C Network | August 15, 2008

A few days ago I read a review of Merrill Lynch’s Jeffrey Birnbaum LinuxWorld keynote on stateless computing. “With stateless computing, users’ settings and data are automatically saved to the…

Cloud Services

By G C Network | August 14, 2008

38% of 456 business technology professionals in a Information Week survey indicated that they currently use or will consider using services from a cloud provider. This seems much betterthan the…

Amazon, Elastra and the New Enterprise Data Center

By G C Network | August 13, 2008

Last week Amazon made an investment into Elastra. Some see this as Amazon’s enterprise play. Others see it as move towards the viability of private clouds. I see it as…

Microsoft Midori

By G C Network | August 12, 2008

Last week word got out that Microsoft’s new research project codenamed Midori. According to Information Week “the Midori system is being called Microsoft’s first cloud-based OS, and it could one…

Dell Trademarking Cloud Computing

By G C Network | August 11, 2008

There has been quite a bit of chatter lately over Dell’s attempt to patent “cloud computing”. Last week, the US Patent and Trade Office put an end to those aspirations…

Rob Enderle Cautions on Cloud Computing

By G C Network | August 8, 2008

Words of caution from Rob Enderle in “The Real Truth and Technology and IT”: “The key to success in the cloud will be keeping solutions simple, plus understanding and mitigating…

3 Important Point for Federal Government Cloud Computing

By G C Network | August 7, 2008

Point 1: In May, Verizon and AT&T were awarded a DHS task order for just under $1B to provide telecommunications services to the department. Verizon won the lead provider’s spot…

A Cloud Methodology

By G C Network | August 7, 2008

Although this was published in June, I just saw it and felt it was to good not to repeat: A Methodology for Cloud Computing Architecture Peel off the applications individually,…

IBM Invests Nearly $400M on Cloud Computing Centers

By G C Network | August 6, 2008

In a press release last week, IBM says that it will spend $360 million to build its most sophisticated, state-of-the-art data center at its facility in Research Triangle Park (RTP),…

Cloud Computing and the NCOIC

By G C Network | August 5, 2008

According to their website, The Network Centric Operations Industry Consortium (NCOIC) has scheduled a session on cloud computing at their upcoming plenary session in September. In case you haven’t heard…

Cryptographic data splitting is a new approach to securing information. This process encrypts data and then uses random or deterministic distribution to multiple shares. this distribution can also include fault tolerant bits, key splitting, authentication, integrity, share reassembly, key restoration or decryption.

Most security schema have one or more of the following drawbacks:

  • Log-in and password access often does not provide adequate security.
  • Public-key cryptographic system reliance on the user for security.
  • Private keys stored on a hard drive that are accessible to others or through the Internet.
  • Private keys being stored on a computer system configured with an archiving or backup system that could result in copies of the private key traveling through multiple computer storage devices or other systems
  • Loss or damage to the smartcard or portable computing device in biometric cryptographic systems
  • Possibility of a malicious person stealing a mobile user’s smartcard or portable computing device using it to effectively steal the mobile user’s digital credentials.
  • The computing device connection to the Internet may provide access to the file where the biometric information is stored making it susceptible to compromise through user inattentiveness to security or malicious intruders.
  • Existence of a single physical location towards which to focus an attack.

Cryptographic data splitting has multiple advantages over current, widely used security approaches because:

  • Enhanced security from moving shares of the data to different locations on one or more data depositories or storage devices (different logical, physical or geographical locations
  • Shares of data can be split physically and under the control of different personnel reducing the possibility of compromising the data.
  • A rigorous combination of the steps is used to secure data providing a comprehensive process of maintaining security of sensitive data.
  • Data is encrypted with a secure key and split into one or more shares
  • Lack of a single physical location towards which to focus an attack

Because of these and other advantages, this approach seems to be a natural for cloud computing.

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

3 Comments

  1. Platypus on December 26, 2008 at 6:35 pm

    New? From the description you give, this sounds a lot like Adi Shamir’s secret sharing from 1979. Maybe you need to be more specific about what the novel part is.



  2. Kevin Jackson on December 26, 2008 at 6:43 pm

    This approach is an advancement to the state-of-the-art. Shamir’s work is referenced in the patent filing. See http://www.freepatentsonline.com/7391865.html



  3. Platypus on December 27, 2008 at 3:38 am

    The thing that matters about a patent is the claims, not the description. Most of the claims don’t even come close to passing the non-obviousness test, as they precisely recapitulate techniques that have been known for over twenty years. Anyone involved with OceanStore, Permabit, Cleversafe, or Allmydata (for example) could show enough prior art to make your head spin. What was the examiner thinking? Maybe this stuff is new to someone, but it’s not new to the industry.